Privacy policy
Learn what personal data we collect, why we use it, who we may share it with and what rights you have regarding it.
Who is the data controller?
The controller of personal data collected through the online store www.n9store.ro is PAINT ME PRETTY S.R.L.. This policy transparently explains how we process and protect your data.
Timiș County, Romania
Romanian tax identification number (CUI): 50079176
Registrul Comerțului: J2024001954359
E-mail: contact@n9store.ro
1. Data we collect
Categories of data used to operate the store.
Who does this policy apply to?
This policy applies to people who visit or use www.n9store.ro, customers who place orders, people who create accounts, subscribe to marketing communications, contact us or otherwise interact with N9 Store.
It may also apply to representatives of our suppliers, collaborators or business partners when we process their data as part of a professional relationship.
What personal data do we collect?
The data collected varies depending on how you use the website and which services you request.
| Data category | Examples | When the data is collected |
|---|---|---|
| Identification data | First name, last name and, where applicable, company name | When creating an account, placing an order or issuing an invoice |
| Contact details | Email address, phone number | When placing an order, contacting us or subscribing to the newsletter |
| Billing and delivery details | Address, city, county, country, postal code and tax details | At checkout and when issuing tax documents |
| Order details | Purchased products, value, discounts, delivery method, returns | When placing and managing orders |
| Payment details | Transaction status, amount and payment identifier | When paying online through NETOPIA Payments |
| Account data | Username, encrypted password, order history and preferences | When creating and using an N9 Store account |
| Communications | Messages, requests, complaints and correspondence | When you contact us by email, phone or forms |
| Technical data | IP address, browser, device, operating system and website activity | When accessing and using the website |
| Marketing data | Consent, preferences and interactions with marketing messages | When subscribing to the newsletter or accepting marketing cookies |
Sensitive data
We do not request or intend to collect special categories of data. Please do not send us such information unless strictly necessary and lawfully requested.
2. Purposes and legal bases of processing
Why we use your data and the legal basis for doing so.
For what purposes do we process data?
| Purpose | Data used | Legal basis |
|---|---|---|
| Account creation and management | Identification, contact and login details | Performance of a contract or pre-contractual steps |
| Order management | Identification, contact, billing, delivery and order details | Performance of a contract |
| Payment processing | Order details, amount and transaction status | Performance of a contract and legal obligations |
| Order delivery | Name, phone, email, address and parcel details | Performance of a contract |
| Issuing and retaining invoices | Identification, address and tax details | Accounting and tax legal obligations |
| Returns, warranties and complaints | Contact, order, payment and correspondence details | Performance of a contract, legal obligations and legitimate interest |
| Fraud prevention and security | Technical data, activity and transaction information | Legitimate interest |
| Customer support | Contact, order and communication details | Performance of a contract and legitimate interest |
| Newsletter and marketing communications | Name, email and preferences | Consent |
| Website analysis and improvement | Technical data, cookies and browsing activity | Consent or legitimate interest, as applicable |
| Defending legal rights in disputes | Data relevant to the request, order or incident | Legitimate interest and legal obligations |
Where certain data is required to place and deliver an order, refusing to provide it may make it impossible to enter into or perform the contract.
Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
3. Who we may share data with
Providers and partners needed to operate the store.
Data recipients
We do not sell or rent your personal data. We may share data only when necessary to provide services, comply with the law or protect our rights.
- NETOPIA Payments, for processing and confirming online card payments;
- GLS, for domestic deliveries and international destinations where the service is available;
- DHL, for international deliveries where the service is available;
- ROMARG and other technical providers, for website hosting, maintenance and security;
- billing, accounting, email, communication and technical support providers;
- analytics and advertising providers, only if the tools are enabled and there is a legal basis;
- lawyers, accountants, auditors, consultants and other specialists;
- public authorities, courts or regulatory bodies when disclosure is required by law.
Providers receive only the data necessary to perform their services. They must maintain confidentiality and implement appropriate safeguards.
4. Data retention and transfers
Retention periods and transfers outside the EEA.
How long do we retain data?
We retain data only as long as necessary for the purposes for which it was collected or as required by accounting, tax, commercial or consumer protection laws.
- order data and tax documents are retained for the periods required by applicable law;
- account data is retained while the account is active and afterward if legal obligations or unresolved requests exist;
- return, complaint and warranty data is retained as needed to resolve cases and defend rights;
- marketing data is retained until consent is withdrawn or you unsubscribe;
- technical data and cookies are retained according to the Cookie Policy and the settings of the tools used;
- correspondence is retained as long as necessary to resolve the request and, where applicable, defend a right.
At the end of the applicable period, data is deleted, anonymized or archived as required by law.
Data transfers outside the European Economic Area
We primarily aim to store and process data in Romania or within the European Economic Area.
Some technical, analytics, communication or advertising providers may process data in countries outside the European Economic Area. In such cases, transfers take place only under a recognized legal mechanism, such as:
- an adequacy decision issued by the European Commission;
- standard contractual clauses approved by the European Commission;
- binding corporate rules;
- other safeguards permitted under data protection law.
5. Your rights
Rights under data protection legislation.
What rights do you have?
How can you exercise your rights?
Send your request to contact@n9store.ro. To protect your data, we may request additional information to verify your identity.
Requests are generally handled within one month. This period may be extended in complex cases as permitted by law, and you will be informed.
You have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).
Data security
We implement appropriate technical and organizational measures to protect data against unauthorized access, loss, alteration, disclosure or destruction.
- using secure connections and SSL/TLS certificates;
- controlling access to systems and administrator accounts;
- updating and monitoring technical components;
- backups and data recovery measures;
- restricting data access according to professional responsibilities;
- using providers that implement appropriate security measures.
No electronic transmission or storage method can guarantee absolute security. Keep your password confidential and contact us if you suspect unauthorized use.
Minors' data
The N9 Store website and products are not specifically aimed at children under 16, and we do not knowingly collect their personal data.
If you are a parent or legal guardian and believe a minor has provided us with data without proper authorization, contact us at contact@n9store.ro.
6. Cookies and policy updates
Similar technologies and subsequent changes.
Cookies and similar technologies
The website uses cookies necessary for store operation, including cart, login, security and preference cookies.
Analytics, personalization or marketing cookies are used only according to the settings and consent expressed through the cookie banner, where consent is required.
You can change or withdraw your choices in the panel available on the website. Further details are available in Cookie Policy.
Policy changes
We may periodically update this policy to reflect legal, technical or service-related changes.
The updated version will be published on this page along with the date of the last update. We recommend checking this page regularly.
Data protection contact
For questions about this policy, how we process your data or how to exercise your rights, you can contact us using the details provided alongside.
Giroc commune, Roiniței Street no. 1,
Timiș County, Romania